PT-2024-24372 · C-Blosc2 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: c-blosc2 versions up to 2.13.2 Description: A critical issue has been found, affecting the ndlz4 decompress function in the file /src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c. This issue leads to a heap-based buffer overflow. The attack can be...

PT-2022-37250 · Git +1 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves functions such as ndlz4 decompress, blosc d, and do job...

PT-2022-37076

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the ndlz4 decompress, ndlz decompress, and blosc d functions. No information is...

PT-2022-37054

Name of the Vulnerable Software and Affected Versions blosc versions affected versions not specified Description The issue is related to a crash caused by a negative-size-param, which occurs in the ndlz4 decompress, ndlz decompress, and blosc d functions. Recommendations At the moment, there is n...

PT-2021-27983

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions ndlz4 decompress, ndlz decompress, and...

PT-2021-27959

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow write crash has been reported, involving the functions ndlz4 decompress, ndlz decompress, and blosc d. Recommendations At the moment...

PT-2021-27926

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE crash has been reported, involving the ndlz4 decompress and blosc d functions, as well as the do job function. Recommendations...

OSV-2021-1645 UNKNOWN READ in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41636 Crash type: UNKNOWN READ Crash state: ndlz4decompress bloscd dojob...

PT-2021-27923

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: ndlz4 decompress, blosc d, and do job. No information is...